Breaking Monero

Breaking Monero is the canonical video series on Monero's protocol history — a YouTube series by Sarang Noether (then a Monero Research Lab researcher) that walks through every major historical privacy weakness in the Monero protocol and the specific protocol change that closed it. Listed at Grade A because Breaking Monero is the single best explanation of why current Monero looks the way it does — the protocol's design decisions become clear when you understand the attacks they're defending against, and Breaking Monero presents that defense-by-defense history in accessible video form.

Background. Breaking Monero was produced and published between 2018 and 2019 by Sarang Noether (cryptographic research pseudonym; the real identity was publicly known in the cryptography community but maintained a research-focused public profile). At time of production, Sarang was an active Monero Research Lab researcher working on Bulletproofs, ring signature analysis, and the broader Monero protocol-evolution roadmap. The series spans 15+ episodes, each covering a specific historical privacy weakness or attack vector against Monero. Hosted on YouTube (search: "Breaking Monero" or the playlist URL); also archived on Internet Archive + cross-referenced by community privacy-tooling resources. The series is freely available — no paywall, no subscription required. Sarang stopped active Monero contributions around 2020; the series remains the canonical educational reference for Monero's protocol history.

What you trust. Researcher-led content — Sarang Noether was an active Monero Research Lab researcher with named contributions to multiple Monero protocols (Bulletproofs work in particular). The series content is informed by direct involvement in the protocol's evolution. Defense-by-defense narrative — each episode follows the same structure: identify a historical privacy weakness (often by referencing academic papers that exposed it), walk through how the weakness was exploited (or could be), explain the protocol change that closed it. Accessible production — the videos are technical but presented for an audience that can follow cryptographic reasoning without being academic cryptographers themselves. Cross-referenced with primary sources — the series consistently links to MRL bulletins, academic papers, and Monero codebase commits that implement the discussed changes. What you don't trust: content age — the series ended in 2019; protocol changes since then (Bulletproofs+, Carrot, Seraphis development, FCMP++) are not covered. For post-2019 protocol evolution, supplement with MRL papers and MoneroKon talks. Sarang Noether is no longer active in Monero — the series doesn't get updated; for current protocol research, monitor MRL directly. YouTube hosting has the usual YouTube concerns (algorithm changes, takedowns, ad-monetisation pressure on the platform); Internet Archive mirrors preserve the content but YouTube remains the canonical viewing surface.

Operational specs. Format: ~15-20 minute episodes, video + audio. Hosting: YouTube playlist + community-archived mirrors on Internet Archive. Languages: English; some episodes have community-contributed subtitles. Episodes cover: ring signature analysis (chain reactions, decoy selection weaknesses, fork attacks), output linkability (early Monero's weaknesses before RingCT), transaction graph analysis, key-image leakage, fee structure attacks, mining centralisation concerns, and how each of these was addressed via specific Monero protocol changes. Format: Sarang on camera with slides + animations explaining specific attack vectors + protocol responses. No accounts required to view — YouTube content is openly accessible. Cross-listed in Monerica, web3privacy, this directory, and essentially every Monero-educational resource. Companion resources: Sarang's research papers (some still hosted at cypherstack.com under "Sarang" attribution; some on arXiv).

Philosophy. Breaking Monero's editorial differentiator is the historical-attacks-and-defenses pedagogy applied to Monero. Most cryptocurrency-explanation content is forward-looking ("here's how Monero works today"); Breaking Monero is backward-looking ("here's what attacks Monero defends against, and which specific design decisions defend against each"). This is the right pedagogy for cryptographically-curious users: understanding *why* Monero uses ring signatures of size 16 (and not 5 or 50), *why* RingCT was introduced, *why* the protocol does a hard fork every ~6 months — requires understanding the attack literature that motivated each decision. Breaking Monero is the only video series that consistently presents that history.

Grade rationale. Grade A reflects: produced by named Monero Research Lab researcher (Sarang Noether) with public research credentials; 15+ episodes covering Monero's protocol-attack-and-defense history end-to-end; freely available on YouTube + archived on Internet Archive; cross-referenced with academic-grade primary sources (MRL bulletins, papers, codebase commits); accessible cryptographic explanation for non-academic-cryptographer audiences; single most-cited educational video series for understanding Monero's protocol design decisions; cross-listed in essentially every Monero-educational resource; 6+ years of operational continuity (series remains accessible since 2018-2019). Last verified 2026-05-11.

Useful when. You're new to Monero but cryptographically-curious — Breaking Monero is the right pedagogy after Moneropedia + the getmonero.org library. You want to understand Monero's design decisions — why ring-size-16, why RingCT, why bulletproofs, why hard forks every 6 months — Breaking Monero answers via the attack-then-defense history. You're a developer or researcher building privacy-currency systems — learning from Monero's iterative defenses is excellent case-study material. You're teaching Monero to others (workshops, courses, peer education) — Breaking Monero is freely usable as supplementary material. You're a journalist or policy researcher writing about Monero's privacy guarantees — the series helps you understand the *why* behind specific protocol choices, not just the *what*. You're an academic evaluating Monero's privacy claims — the series cross-references academic papers that you can cite directly.

Caveats. Content frozen at 2019 — Breaking Monero ended around 2019; protocol changes since (Bulletproofs+, Carrot/Seraphis development, FCMP++ research, hard forks 2020-2026) aren't covered. For post-2019 protocol evolution, supplement with MRL papers, MoneroKon talks, and getmonero.org documentation updates. Sarang Noether is no longer active in Monero research — the series doesn't get updated. YouTube hosting concerns — the canonical viewing surface is YouTube, which has the usual platform concerns (potential takedowns, algorithmic visibility, ad monetisation on the platform). Internet Archive mirrors preserve the content. English-only — community subtitles cover some episodes but are not comprehensive. Episode order matters — Breaking Monero is best watched in playlist order; some episodes build on concepts from earlier ones. Don't skip around without understanding the prerequisites. Some specifics are out-of-date — episodes discussing specific ring-size or fee-structure values may reference older protocol parameters that have since changed. The *attack-and-defense reasoning* remains valid; the *specific parameter values* should be cross-checked against current Monero protocol state. Not a substitute for MRL primary sources — for citation-grade work, refer to MRL bulletins and papers rather than the video series. Breaking Monero is excellent secondary literature; MRL is primary. Doesn't cover external academic critiques in depth — papers critical of Monero (e.g., the 2017 traceability paper that motivated RingCT) are referenced but the series presents Monero's response perspective; for adversarial perspective, read the original critique papers directly.